54836 matches found
VulnCheck KEV: CVE-2025-54125
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can b...
Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-32415 DESCRIPTION: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploi...
Malicious code in wind-decode-serialize-balance-xml (npm)
The package wind-decode-serialize-balance-xml was found to contain malicious code...
Malicious code in polaris-node-config-graphql-xml (npm)
The package polaris-node-config-graphql-xml was found to contain malicious code...
Malicious code in xml-juno-changelog-hyperion (npm)
The package xml-juno-changelog-hyperion was found to contain malicious code...
MAL-2025-46737 Malicious code in xml-juno-changelog-hyperion (npm)
The package xml-juno-changelog-hyperion was found to contain malicious code...
MAL-2025-45575 Malicious code in polaris-node-config-graphql-xml (npm)
The package polaris-node-config-graphql-xml was found to contain malicious code...
Malicious code in convict-betelgeuse-archaeoastronomy-xml (npm)
The package convict-betelgeuse-archaeoastronomy-xml was found to contain malicious code...
Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
MAL-2025-46637 Malicious code in wind-decode-serialize-balance-xml (npm)
The package wind-decode-serialize-balance-xml was found to contain malicious code...
MAL-2025-46736 Malicious code in xml-epsilon-double-emulate-spy (npm)
The package xml-epsilon-double-emulate-spy was found to contain malicious code...
MAL-2025-46190 Malicious code in tachyon-vulcan-callisto-xml (npm)
The package tachyon-vulcan-callisto-xml was found to contain malicious code...
MAL-2025-46615 Malicious code in whitedwarf-xml-phoebe-quantum-computing (npm)
The package whitedwarf-xml-phoebe-quantum-computing was found to contain malicious code...
MAL-2025-43888 Malicious code in convict-betelgeuse-archaeoastronomy-xml (npm)
The package convict-betelgeuse-archaeoastronomy-xml was found to contain malicious code...
Malicious code in tachyon-vulcan-callisto-xml (npm)
The package tachyon-vulcan-callisto-xml was found to contain malicious code...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : Ruby vulnerabilities (USN-7734-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7734-1 advisory. It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this...
rexml: REXML ReDoS vulnerability
A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...
Langchain Community Vulnerable to XML External Entity (XXE) Attacks
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which can lead to sensitive informati...
GHSA-PC6W-59FV-RH23 Langchain Community Vulnerable to XML External Entity (XXE) Attacks
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which can lead to sensitive informati...
CVE-2025-41041
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datacode', 'datalang0key', 'datalang0value', 'datalang1key' and 'datatitle' parameters in /apprain/developer/language/default.x...